Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Denial of Service with multipart forms when '=' not found #1

@silabs-steveegerter

Description

@silabs-steveegerter

if the '=' character is not found in a multipart form request,a NULL pointer is returned in Str_Char_N, this pointer is then incremented and dereferenced which can lead to a crash. See HTTPsReq_HdrParse() for details. I recommend adding a test for NULL.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions